EX294 Practice Test 4 — 25 Questions

Question 1

Consider the task: `- debug: msg={{ item | upper }}` with `loop: "{{ ['a','b'] }}"`. What will be the output?

Accepted Answer

Two debug messages: 'A' and 'B'. The `upper` filter in Ansible converts each string item in the loop to uppercase. The `loop` directive iterates over the list `['a','b']`, and for each iteration, the `{{ item | upper }}` expression applies the `upper` filter to the current item, resulting in `'A'` and `'B'`. The `debug` module then prints each transformed value as a separate message.

Answer

An error because upper expects a string, not a loop variable.

Answer

Two debug messages: 'a' and 'b'

Answer

One debug message with the list ['A','B']

Question 2

Which command publishes a collection to Automation Hub?

Accepted Answer

ansible-galaxy collection publish ./namespace-name-1.0.0.tar.gz --token MYTOKEN. `ansible-galaxy collection publish` is the specific command used to upload a collection tarball to Automation Hub (or any Galaxy server). The `--token` flag provides the required API authentication token for the publish operation. This command sends the tarball to the server's API endpoint, which validates and imports the collection.

Answer

ansible-galaxy collection import ./namespace-name-1.0.0.tar.gz

Answer

ansible-galaxy collection upload ./namespace-name-1.0.0.tar.gz

Answer

ansible-galaxy collection push ./namespace-name-1.0.0.tar.gz

Question 3

Which THREE actions are required to successfully publish a collection to Automation Hub?

Accepted Answer

Build the collection with ansible-galaxy collection build.. `ansible-galaxy collection build` is the required command to package a collection into a distributable tarball (e.g., `namespace-collection-1.0.0.tar.gz`). This tarball is the artifact that is then uploaded to Automation Hub. Without building the collection, there is no file to publish.

Answer

Sign the collection with GPG.

Answer

Run ansible-galaxy collection test.

Question 4

Based on the exhibit, which collection provides modules for managing Red Hat Insights subscriptions?

Accepted Answer

`redhat.insights`. The `redhat.insights` collection is the official Ansible collection from Red Hat that provides modules specifically for managing Red Hat Insights subscriptions, including `insights_register` and `insights_unregister`. This collection is maintained by Red Hat and is the correct source for automating Insights registration and subscription management tasks.

Answer

`community.general`

Answer

`ansible.posix`

Answer

`insights`

Question 5

A large enterprise has deployed Ansible Automation Platform with multiple organizations. A team lead needs to allow a junior administrator to create and manage job templates within their own organization, but not modify organizations, users, or system settings. Which RBAC roles should be assigned?

Accepted Answer

Assign the `job_template_admin` role on the specific organization.. The `job_template_admin` role on a specific organization grants the ability to create, edit, and manage job templates within that organization without allowing modifications to organizations, users, or system settings. This is the correct RBAC role for the junior administrator's requirements.

Answer

Assign the `admin` role on the organization.

Answer

Assign the `execute` role on all job templates.

Answer

Assign the `auditor` role on the organization.

Question 6

An organization's execution environment must include a custom RPM that is not in the default base image. How should this be added in the execution-environment.yml?

Accepted Answer

Add the RPM to the 'dependencies' section under 'system'.. In an execution-environment.yml file, custom RPM packages that are not part of the default base image must be listed under the 'dependencies' section with the 'system' key. This instructs ansible-builder to install those RPMs using the system package manager (e.g., dnf or yum) during the build process, ensuring the execution environment includes the required system-level libraries or tools.

Answer

Add the RPM to the 'dependencies' section under 'python'.

Answer

Use a 'prepended_base' directive.

Answer

Use a custom base image that includes the RPM.

Question 7

Which directory is the default location for installed Ansible collections on a control node for a regular user?

Accepted Answer

~/.ansible/collections. For a regular (non-root) user on an Ansible control node, the default location for installed collections is `~/.ansible/collections`. This is defined by Ansible's default collection search path, which includes the user's home directory under `~/.ansible/collections` for user-level installations. When a user runs `ansible-galaxy collection install` without specifying a custom path, the collection is placed in this directory by default.

Answer

/usr/share/ansible/collections

Answer

/etc/ansible/collections

Answer

/opt/ansible/collections

Question 8

Which THREE of the following are core components of Automation Platform that are installed by default in a standard setup?

Accepted Answer

Automation controller. Automation controller (formerly Ansible Tower) is the web-based UI and REST API platform that provides role-based access control, job scheduling, and inventory management for Ansible automation. It is installed by default as part of a standard Red Hat Ansible Automation Platform setup to serve as the central control plane.

Answer

Red Hat Enterprise Linux

Answer

Ansible Core

Question 9

Which TWO should be configured to enable centralized logging from multiple Automation Controller nodes to an external Elasticsearch cluster? (Choose two.)

Accepted Answer

Configure a logging aggregator in the controller's system settings to point to the Elasticsearch endpoint.. Automation Controller (formerly Ansible Tower) provides a built-in logging aggregator configuration in its system settings. By specifying the Elasticsearch endpoint there, the controller itself handles forwarding all relevant job and system logs from every node to the external Elasticsearch cluster, without requiring per-node agents.

Answer

Configure `logrotate` to ensure logs are not truncated before being sent.

Answer

Set up `rsyslog` on each node to forward application logs to Elasticsearch.

Answer

Install and configure `filebeat` on each controller node as a sidecar service.

Question 10

An organization uses a private automation hub to distribute collections. A developer has created a new collection and needs to ensure it is available in the hub for others. Which command should the developer use to upload the collection to the private automation hub?

Accepted Answer

ansible-galaxy collection publish. `ansible-galaxy collection publish` is the command specifically designed to upload a built collection artifact (a .tar.gz file) to a Galaxy server, including a private automation hub. This command sends the collection to the configured Galaxy server endpoint, making it available for others to install via `ansible-galaxy collection install`.

Answer

ansible-galaxy collection import

Answer

ansible-galaxy collection build

Answer

ansible-galaxy collection install

Question 11

Which TWO of the following are required in a valid Ansible collection directory structure?

Accepted Answer

`galaxy.yml` file. The `galaxy.yml` file is mandatory in a valid Ansible collection directory structure because it serves as the metadata file that defines the collection's name, version, author, and dependencies. Without this file, the collection cannot be properly built, published, or installed via `ansible-galaxy`. It is the equivalent of a package manifest for the collection.

Answer

`tests/` directory

Answer

`docs/` directory

Answer

`roles/` directory

Question 12

What is the most likely cause of this error?

Accepted Answer

The filter name is incorrect; no filter named 'encrypt_string' exists by default.. The error occurs because there is no built-in filter named 'encrypt_string' in Ansible. While Ansible provides many filters for data transformation, 'encrypt_string' is not one of them by default. This filter would need to be provided by a custom filter plugin or a collection, and since it is not present, Ansible raises an undefined filter error.

Answer

The `filter_plugins` path is misconfigured.

Answer

The `encrypt_string` filter plugin is not installed.

Answer

The playbook syntax is invalid.

Question 13

A job template runs successfully on some hosts but fails on others with 'Permission denied' for the same task. The admin has verified that the credential is correct. What is the most likely cause?

Accepted Answer

The privilege escalation method (become method) differs among hosts.. B is correct because the 'Permission denied' error on a task that runs successfully on some hosts but not others, despite a verified credential, typically indicates a privilege escalation issue. The become method (e.g., sudo, su, pbrun) may be configured differently or unsupported on the failing hosts, causing Ansible to fail when attempting to escalate privileges for the task. Since the credential is correct, the failure occurs during the become process, not authentication.

Answer

The package repository is not accessible from those hosts.

Answer

The credential's username is incorrect for some hosts.

Answer

The SSH key is not accepted on some hosts.

Question 14

An organization uses Ansible Automation Controller. They have an inventory source that syncs from a Git repository containing `inventory/hosts.yml`. The job template uses this inventory. Recently, the inventory stopped updating. The admin checks the job logs and sees: `ERROR! Could not update inventory source: invalid inventory source definition`. What is the most likely issue?

Accepted Answer

The inventory file `hosts.yml` has a syntax error, such as a missing colon.. The error message 'invalid inventory source definition' indicates that the inventory file itself is malformed, not that there is a connectivity or credential issue. In Ansible Automation Controller, when an inventory source syncs from a Git repository, the controller parses the inventory file (e.g., `hosts.yml`) according to YAML syntax rules. A missing colon would break the YAML structure, causing the controller to reject the file as invalid, which matches the error.

Answer

The Git repository is unreachable due to network issues.

Answer

The project that contains the playbook has been deleted.

Answer

The machine credential stored in the controller has expired.

Question 15

You run a playbook with `msg: "{{ 'mypassword' | password_hash('sha512') }}"`. What is the output?

Accepted Answer

A hashed representation of the password using SHA-512.. The `password_hash` filter in Ansible uses the `passlib` library (when available) to generate a cryptographically hashed representation of the input string. When the hash type is specified as `'sha512'`, it produces a SHA-512 crypt hash (typically starting with `$6$`), not the original plaintext. This is a standard Ansible filter for securely transforming passwords into hashed formats for use in user modules or configuration files.

Answer

An error because password_hash requires the `passlib` library.

Answer

A random alphanumeric string.

Answer

The string 'mypassword' unchanged.

Question 16

Refer to the exhibit. After the playbook run fails on the 'Verify config' task, what happens to the 'restart service' handler?

Accepted Answer

The handler is not executed because the playbook failed before the end of the play.. Handlers are notified but only run at the end of the play if notified. However, if a subsequent task fails, the playbook stops, and handlers are not executed unless the 'force_handlers' option is set.

Answer

The handler runs immediately after the failed task.

Answer

The handler runs on the next playbook run.

Answer

The handler is executed because it was notified before the failure.

Question 17

A company uses a static inventory file for Ansible Tower. They need to add a new host to an existing group. Which action should they take?

Accepted Answer

Edit the inventory in the Tower UI and add the host to the group.. The company uses a static inventory file for Ansible Tower, and the Tower UI provides a built-in interface to manage static inventories. Editing the inventory in the Tower UI and adding the host to the group directly updates the underlying static inventory file and synchronizes it with Tower's database, ensuring the host is available for job runs without manual file manipulation.

Answer

Use the ansible-inventory command to add the host.

Answer

Modify the static inventory file and run a job template.

Answer

Create a new inventory and host group.

Question 18

Ansible Tower is configured with a dynamic inventory source from VMware vCenter. The playbook needs to limit execution to hosts with a specific custom attribute. How should this be achieved?

Accepted Answer

Use a smart inventory filter.. Smart inventories in Ansible Tower allow you to apply a filter (using Jinja2-style syntax) against an existing inventory source, such as a dynamic VMware vCenter source, to limit execution to hosts matching specific criteria like a custom attribute. This approach avoids modifying the source script or creating duplicate inventory sources, preserving the dynamic nature of the inventory while enabling targeted host selection.

Answer

Modify the VMware inventory script to filter hosts.

Answer

Add the required hosts manually.

Answer

Create a new inventory source with a filter.

Question 19

The deployment has 4 replicas. During a rolling update, what is the maximum number of pods that can be unavailable at any single time?

Accepted Answer

1. The default rolling update strategy for a Deployment in Kubernetes sets `maxUnavailable` to 25% of the desired replicas, rounded up. With 4 replicas, 25% equals 1, so at most 1 pod can be unavailable during the update. This ensures minimal disruption while allowing the update to proceed.

Answer

2

Answer

4

Answer

0

Answer

3

Question 20

Which THREE commands can verify the status of a rolling update on an OpenShift deployment?

Accepted Answer

oc describe deployment/. `oc describe deployment/` provides detailed information about the deployment, including the current rollout status, revision history, and conditions such as Progressing or Available. This allows you to verify whether a rolling update is in progress, has completed, or has stalled by examining fields like `Replicas`, `UpdatedReplicas`, and `Conditions`.

Answer

oc logs deployment/<name>

Answer

oc get pods -l <selector>